Generic playbooks

Cortex XSIAM generic playbooks for common analyst workflows.

The Common Playbooks content pack, installed by default, provides support for common tasks that are part of many analyst workflows. These playbooks can support multiple integrations, and can be used independently or as a sub-playbook for your larger use case.

You can view a full list of the playbooks in the Common Playbooks content pack and their descriptions in the Content tab of the pack.

A few examples of generic playbooks include:

• Detonate URL - Generic

  Detonates URLs through active integrations that support URL detonation.
• File Enrichment - File reputation

  Get file reputation using one or more integrations.
• Get File Sample - Generic

  Retrieves files from endpoints by the file hash or the file path.